According to industry experts, implementing a Vulnerability Disclosure Program (VDP) can help reduce the risk of incurring penalties associated with data breaches under US regulatory frameworks.
In the case of a data breach governed by US regulations, the absence of a VDP may result in regulatory non-compliance and potential penalties.